CNG: Review file download scripts and use GPG verification wherever applicable

This is a follow-up for this discussion: gitlab-org/build/CNG!1091 (comment 1065218267)

Review existing file download scripts and check whether GPG verification can be used to verify the downloaded file.

Ensure that the GPG verification is working for the existing download scripts.